[Galene] Re: Troubleshooting 0kbps/0kbps video

[Michael Aldridge <aldridge.mac@gmail.com>]

>> Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene
> 
> Wow
Yeah the network architecture is slightly too exciting.  If I add some
more labels it might make more sense as a traditional corporate service:

Laptop -> VPN Server -> Corp Edge -> Prod Edge -> Cluster Edge -> Galene

The VPN is a very traditional road-warrior setup, so knowledge of IPs
isn't a problem, there's already a nice dashboard that shows who's
likely to be on based on tunnel status.

> Yes.  You need to put a TURN server somewhere where it can be reached by
> both the client and the server.  So your diagram becomes:
> 
>            --------------> TURN Server <-------------
>           /                                           \
>   Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene


Since reaching all the way back into the corp network to see a client is
not practical in this network topology I'm trying to better understand
where/how to put the TURN server.  Some cursory googling suggests that
its possible to tunnel all this traffic over HTTP.  Is this something
that the built-in TURN server for Galene supports?

In your opinion is this network architecture even practical?  With some
work I could refactor it to look like:

Laptop -> VPN Server -> LB -> Galene

I assume this would make things slightly cleaner from a traffic
management perspective, but that then involves spinning up a dedicated
machine for Galene which is a harder sell in my environment.  If this is
the only practical approach though then that's what I'll explore.

--Michael